Cisco Sourcefire SNORT vs Fortinet FortiGate IPS comparison

Cancel
You must select at least 2 products to compare!
Cisco Logo
2,043 views|1,518 comparisons
94% willing to recommend
Fortinet Logo
4,111 views|2,584 comparisons
95% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cisco Sourcefire SNORT and Fortinet FortiGate IPS based on real PeerSpot user reviews.

Find out in this report how the two Intrusion Detection and Prevention Software (IDPS) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Cisco Sourcefire SNORT vs. Fortinet FortiGate IPS Report (Updated: May 2024).
772,649 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The solution is stable.""The most valuable features of Cisco Sourcefire SNORT are the dashboard for monitoring events.""The whole solution is very good, and stable.""The most valuable feature is the visibility that we have across the virtual environment.""In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well.""It simplifies the configuration process by offering pre-defined base configurations, including security and connectivity settings.""The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.""Cisco Sourcefire SNORT is easy to configure and the reporting is great. It's also very user-friendly."

More Cisco Sourcefire SNORT Pros →

"Integrated management is a very valuable feature.""The most useful features of Fortinet FortiGate IPS are you can create a virtual firewall within it, most other firewalls do not have this feature. You are able to manage your network and have network segmentation within your firewall. Additionally, you can create virtual switches within the firewall and have policy management, such as firewall and access policy.""Has a very user-friendly interface and doesn't require any prior knowledge.""I have found the decryption of Fortinet FortiGate IPS very good. It's called SSL deep inspection, it's working very well. This is how you decrypt access and traffic, and it is through the IPS antivirus center. Additionally, the UI is user-friendly.""It does not require a lot of maintenance.""The most valuable feature of Fortinet FortiGate IPS is its efficiency.""I have found most of the features to be good with excellent functionality.""FortiGate IPS is really easy to use. I don't have any problems with this."

More Fortinet FortiGate IPS Pros →

Cons
"To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team are working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have.""If the price is brought down then everybody will be happy.""The customization of the rules can be simplified.""Performance needs improvement.""The implementation could be a bit easier.""Integration with other components — even Cisco's own products — can be enhanced to improve administrative experience.""The initial setup is a little difficult compared to other products in the market. It depends on the environment. If we are doing any migration, it might take months in a brown-field environment.""I would like to have analytics included in the suite."

More Cisco Sourcefire SNORT Cons →

"IPs are not handled well and the process is unnecessarily complicated.""The graphical interface could be improved.""Deploying FortiGate is hard.""The web filtering categories could improve in Fortinet FortiGate IPS. There are too many websites under the category of Unknown and the other categories are not featuring all the necessary sites.""It would be better if they had a dashboard where we could see what attacks were happening. It would be good to see who's trying to get into our network.""They should add a feature for detailed reporting.""Fortinet can add some Machine Learning and AI to improve its accuracy and give it an edge on IPS detection and protection.""The system can slow down when inspections are carried out."

More Fortinet FortiGate IPS Cons →

Pricing and Cost Advice
  • "We have a three-year license for this solution."
  • "Licensing for this solution is paid on a yearly basis."
  • "I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices."
  • "The cost is per port and can be expensive but it does include training and support for three years."
  • More Cisco Sourcefire SNORT Pricing and Cost Advice →

  • "The pricing for FortiGate IPS is competitive with other products in the category."
  • "We are currently evaluating a Palo Alto solution, and the pricing could be a reason for going for Palo Alto."
  • "They are more expensive than others."
  • "It is not expensive as compared to Cisco."
  • "The price is okay, so far so good."
  • "The solution could be better priced."
  • "The licensing costs are very competitive."
  • "There is an annual license to use this solution. The prices have been increasing over the years."
  • More Fortinet FortiGate IPS Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
    772,649 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.
    Top Answer:The product is inexpensive compared to leading brands such as Palo Alto or Fortinet. It is cheaper than Palo Alto and comparable to Fortinet. It also depends on Cisco’s discount. Sometimes it's… more »
    Top Answer:The solution has some stability issues. Also, it's complicated compared to other products like FortiGate.
    Top Answer:The most significant aspect of IPS is self-explanatory as it primarily focuses on intrusion prevention, which is crucial for Fortinet's internal outbreak prevention efforts and ensuring compliance on… more »
    Top Answer:There is room for improvement in being proactive about identifying and integrating new signatures.
    Ranking
    Views
    2,043
    Comparisons
    1,518
    Reviews
    6
    Average Words per Review
    472
    Rating
    8.0
    Views
    4,111
    Comparisons
    2,584
    Reviews
    26
    Average Words per Review
    369
    Rating
    8.4
    Comparisons
    Also Known As
    Sourcefire SNORT
    FortiGate IPS
    Learn More
    Overview

    Snort is an open-source, rule-based, intrusion detection and prevention system. It combines the benefits of signature-, protocol-, and anomaly-based inspection methods to deliver flexible protection from malware attacks. Snort gained notoriety for being able to accurately detect threats at high speeds.

    Fortinet FortiGate IPS is a highly effective intrusion detection and prevention solution. It is designed to secure a user’s system from end to end and ensure that users are equipped to handle even the most sophisticated threats. Organizations across a wide variety of industries trust IPS to help them prevent unwanted intrusions from harming their networks.

    Fortinet FortiGate IPS Benefits

    Some of the ways that organizations can benefit by choosing to deploy Fortinet FortiGate IPS include:


    • Vulnerability scanning and patching. IPS scans for threats on a deeper level than more traditional software might. It penetrates the uppermost layer of a network and identifies vulnerabilities that might not be easily spotted. It scans the entire network to give administrators a full understanding of the potential threats that they might have to address. They can then patch the points of vulnerability before those areas can be exploited.


    • Flexibility. IPS is highly flexible in that it is truly agnostic. It is capable of operating across a wide variety of devices and environments. Any network, cloud, or device type that an organization wants to protect can run IPS. Users do not need to buy any other solution to enable this to operate in the way that they need.


    • Reliability. IPS provides a complete protective package without requiring users to sacrifice speed. It allows for quick threat identification and remediation.


    Fortinet FortiGate IPS Features


    • Machine learning and AI. IPS puts powerful machine learning and AI tools into the hands of its users. These tools enable users to find threats that users might not otherwise be able to identify. They identify vulnerabilities that traditional software simply cannot and enables users to address them before they can escalate. They analyze every portion of an organization’s network architecture to find areas that can be exploited.


    • Integration suite. IPS enables users to integrate their security with many different cloud and application security services. This gives users the option to plug any feature hole that they might perceive. Advanced threats that ordinarily cannot easily be dealt with using IPS’ features can now be easily resolved. Organizations can seamlessly combine the features that IPS offers with other platforms to bolster their effectiveness and resolve virtually any type of threat.


    • Security controls. IPS comes equipped with security controllers that enable users to run it on the web server application of their choice.


    Reviews from Real Users

    Fortinet FortiGate IPS is a highly effective solution that stands out when compared to many of its competitors. Two major advantages are the powerful zero-day protection features and the way it manages to compete with even its fiercest competitors.

    Srahavan A., the CEO of a computer software company, said, “We like signature-based anomaly detection and zero-day protection features. For zero-day protection, we use Cloud Sandboxing, so whenever the zero-day threat occurs, it automatically sends it to its Cloud Sandbox. After getting information from Cloud Sandbox, then the intrusion is defined.”

    Sachin V., a network administrator said, “We've found the most valuable feature to be the very user-friendly interface... It has a good set of UTM features, a good bandwidth shaping mechanism, and other features. It has efficient algorithms and it competes well with Palo Alto and TechPoint.

    Sample Customers
    CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia
    Riverside Healthcare, Salt Lake City, Dell SecureWorks, Credit Bank Zagreb
    Top Industries
    REVIEWERS
    Computer Software Company27%
    Financial Services Firm18%
    Comms Service Provider18%
    Government9%
    VISITORS READING REVIEWS
    Computer Software Company20%
    Government9%
    Financial Services Firm8%
    Comms Service Provider7%
    REVIEWERS
    Computer Software Company19%
    Comms Service Provider19%
    Financial Services Firm17%
    Manufacturing Company8%
    VISITORS READING REVIEWS
    Computer Software Company24%
    Financial Services Firm9%
    Manufacturing Company8%
    Comms Service Provider7%
    Company Size
    REVIEWERS
    Small Business22%
    Midsize Enterprise39%
    Large Enterprise39%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise13%
    Large Enterprise62%
    REVIEWERS
    Small Business51%
    Midsize Enterprise13%
    Large Enterprise36%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise19%
    Large Enterprise56%
    Buyer's Guide
    Cisco Sourcefire SNORT vs. Fortinet FortiGate IPS
    May 2024
    Find out what your peers are saying about Cisco Sourcefire SNORT vs. Fortinet FortiGate IPS and other solutions. Updated: May 2024.
    772,649 professionals have used our research since 2012.

    Cisco Sourcefire SNORT is ranked 12th in Intrusion Detection and Prevention Software (IDPS) with 18 reviews while Fortinet FortiGate IPS is ranked 4th in Intrusion Detection and Prevention Software (IDPS) with 54 reviews. Cisco Sourcefire SNORT is rated 7.6, while Fortinet FortiGate IPS is rated 8.4. The top reviewer of Cisco Sourcefire SNORT writes "An IPS solution for security and protection but lacks stability". On the other hand, the top reviewer of Fortinet FortiGate IPS writes "Very stable with good network protection". Cisco Sourcefire SNORT is most compared with Cisco NGIPS, Check Point IPS, Palo Alto Networks Advanced Threat Prevention, Darktrace and Vectra AI, whereas Fortinet FortiGate IPS is most compared with Palo Alto Networks Advanced Threat Prevention, Trend Micro TippingPoint Threat Protection System, Cisco NGIPS, Check Point IPS and Palo Alto Networks URL Filtering with PAN-DB. See our Cisco Sourcefire SNORT vs. Fortinet FortiGate IPS report.

    See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.

    We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.